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Response to Amendment 

1 . This action is responsive to the amendment filed on April 30, 2007. Claims 1-30 
are pending in this application. Claims 28-30 are newly added to instant application. 

2. Applicant's arguments with respect to claims 1-27 have been considered but are 
not persuasive, see the section "response to argument at the end. 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claim 1-3, 5-8, 10-20, 22-24 and 27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Scoredos et al. (Pub. No.: US 2004/0250127 A1), hereinafter 
"Scoredos" in view of Reddy et al. (Patent No.: US 7062540 B2), hereinafter "Reddy". 

3. As to claim 1 , Scoredos discloses, a method for filtering transport layer 
connections with application layer information, comprising the steps of: 

receiving a connection request having an application layer component and a 
transport layer component ([0015, lines 1-4], where tcp/ip connection comprises of 
transport layer component and application layer component.); 

providing a connection database to store infomnation about connection requests 
([0016, lines 1-4], table of rules can be a database); 
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providing a throttle filter using data from the connection database, the throttle filter 
to filter the connection request at the transport layer component ([0016, lines 1-5]); 

applying the throttle filter to the received connection request ([0016, lines 8-9]); 

if the throttle filter blocks the transport layer component of the connection 
request, dropping the connection request silently ([0033, lines 2-4J); and 

Scoredos does not explicitly disclose, providing a connection database to store 
information about associated application layer outcomes; or if the throttle filter allows 
the transport layer component of the connection request, proceeding with the 
application layer component. However, Reddy teaches, providing a connection 
database to store information of associated application layer outcomes (Col.7, lines 64- 
66) ; and if the throttle filter allows the transport layer component of the connection 
request, proceeding with the application layer component (Col.8, lines 5-23, where 
notifications are outcome of applications outcome which are communicated through 
firewall by web server and displayed at user interface in http form or could be a HTML 
page with time out notice or error notice or status) 

Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the invention was made to combine the teachings of Scoredos with the teachings 
of Reddy in order to authenticate the remote user to access, monitor or execute the 
application through monitoring software based on users build up profile kept in the 
databases in appropriate domain. 

4. As to claim 12, Scoredos discloses, a system to filter server connections in an 
embedded system, comprising: 
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a network interface to receive a connection request from a requestor (Fig.1, step- 
112, [0015, lines 13-14]) , tfie connection request having an application layer connection 
component and a transport layer connection component ([0015, lines 1-4], tcp/ip 
connection means it contains header information which deals with transport layer and 
payload which contains data or deals with application layer.); 

a filter device to filter connections using the transport layer connection 
component ([0015, line 14]), the filter device Including a connection database and a 
throttle filter ([0015, lines 3-5], where firewall is filtering device and set of rules is a 
database), the connection database to store information about connection requests, the 
throttle filter having data from the connection database to filter connection requests 
using the transport layer connection component ([0016, lines 1-5], filtering, [0016, lines 
1-4], table of rulies could be a database); and 

a controller coupled to the filter device and the network interface (Scoredos, 
Fig.1, element-100), the controller to apply the throttle filter to the transport layer 
connection component of the connection request (Scoredos, [0015], where firewall is 
processing the incoming traffic which could be connection request), to drop the 
connection request silently if the throttle filter blocks the transport layer component 
(Scoredos, [0033, lines 2-4], where connection is dropped based on the limit rule and 
allowed packets will obviously be further processed), to proceed with an application 
layer connection if the throttle filter allows the transport layer component (Scoredos, 
[0033, lines 2-4], where connection is dropped based on the limit rule and allowed 
packets will obviously be further processed), to add data about the application layer 
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connection to tlie connection database, and to update the tlirottle filter with information 
about the connection database (Flg.1, Step-112 and Step-101,[0015, lines 12-14], 
Interface card is controller which Is coupled with filtering device 101). 

Scoredos does not disclose explicitly, the connection database stores application 
layer connection component outcomes. However, Reddy teaches, connection database 
stores application layer connection component outcomes (Fig. 2, Step-76, Col.6, lines 
17-25 and lines 29-36, where database 76, keeps events which are outcomes of 
application and uses them later on as web server sends the response to client through 
HTTP protocol). 

5. As to claim 27, a computer program product having a computer-readable 
medium including computer program logic encoded thereon that, when performed on a 
computer system directs the computer system to perform the method of: 

receiving a connection request having an application layer component and 
a transport layer component ([0015, lines 1-4], where tcp/ip connection comprises of 
header Infomiatlon which is transport layer component and payload Information which is 
application layer component); 

providing a connection database to store information about connection requests 
[(0016, lines 1-4], table of rules has the profile which could be a database); 

providing a throttle filter using data from the connection database, the throttle filter 
to filter the connection request at the transport layer component ([0016, lines 1-5) and 
[0050, lines 1-3], where limit rule is incorporated in the data structure); 



Application/Control Number: 10/681,870 Page 6 

Art Unit: 2152 

applying the throttle filter to the received connection request ([0016, lines 7-9], 
where packets are processed through filtering functions); 

if the throttle filter blocks the transport layer component of the connection request, 
dropping the connection request silently ([0033, lines 2-4]; depending on the rule 
connection is dropped); 

Scoredos does not explicitly disclose, providing a connection database to store 
infomiation about associated application layer outcomes; or if the throttle filter allows 
the transport layer component of the connection request, proceeding with the 
application layer component. However, Reddy teaches, providing a connection 
database to store information of associated application layer outcomes (Col.7, lines 64- 
66) ; and if the throttle filter allows the transport layer component of the connection 
request, proceeding with the application layer component (Col.8, lines 5-23, where 
notifications are outcome of applications outcome which are communicated through 
firewall by web server and displayed at user interface in http form or could be a HTML 
page with time out notice or error notice or status). 

Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the invention was made to modify the teachings of Scoredos with the teachings of 
Reddy in order to authenticate the remote user to access, monitor or execute the 
application through monitoring software based on users build up profile kept in the 
databases in appropriate domain. 
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6. As to claim 2, Scoredos and Reddy disclose the invention substantially as in 
parent claim 1, Including, updating the throttle filter with Inforrhation from the connection 
database (Scoredos, Fig. 1 , Step-1 00, [0003, lines 5-1 0]). 

adding data from an application layer outcome of the connection request to 
the connection database (Reddy, Col.7, lines 64-66, where agent detects the 
application outcome as notifications which is added into database Fig.2,Step-76). 

7. As to claim 3, Scoredos and Reddy disclose the invention substantially as In 
parent claim 1, Including, recording a connection requestor identifier to the connection 
database (Scoredos, [0006, lines 7-9, where IP entity is connection requestor and IP is 
Identifier); and 

providing a connection requestor rank to the connection requestor identifier 
(Scoredos, [0057, lines 13-15], clearly shows that each connection has an ID against Its 
connection request) and [0059, lines 1-9], where hash technique is interpreted as 
ranking to give priority for faster processing). 

the database adds all the associated outcome events from each application and 
it will be an obvious variation to construct some sort of ranking system to give priority to 
certain client entity based on clients frequent request for certain application (Reddy, 
Col.7, lines 64-66, where notifications and events are the outcomes of applications 
running on compute, Fig.2, Step-40). 

8. As to claim 5, Scoredos and Reddy disclose the Invention substantially as in 
parent claim 1, including, the throttle filter is a list of connection request characteristics 
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and the step of applying the throttle filter further comprises comparing data from the 
connection request to the list of connection request characteristics (Scoredos, [0006, 
lines 1-11], where limit table is interpreted as throttle filter). 

9. As to claim 6, Scoredos and Reddy disclose the invention substantially as in 
parent claim 1 , including, the list of connection request characteristics further comprises 
a list of connection requestor IP addresses to be blocked as indicated by data from the 
connection database (Scoredos, [0002, lines 7-1 1], where set of rules is a database and 
set of rules can be a list of blocked IP addresses). 

1 0. As to claim 7, Scoredos and Reddy disclose the invention substantially as in 
parent claim 1 , including, the list of connection request characteristics further comprises 
a list of connection requestor port numbers to be blocked as indicated by data from the 
connection database (Scoredos, [0002, lines 7-11], where set of rules is a database and 
set of rules can be a list of blocked ip addresses and each IP carries a port number in 
the header infomriation). 

11. As to claim 8, Scoredos and Reddy disclose the invention substantially as in 
parent claim 1 , including, the list of connection request characteristics further comprises 
a list of connection requestor virtual routing fonwarding table IDs to be blocked as 
indicated by data from the connection database (Scoredos, [0016, lines 1-5], where 
destination IP can be a VRF ID which has an entry in State table in the database and 
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[0003, lines 3-4, where it is ad^nowiedged that rules can be programmed to block 
specific addresses). 

12. As to claim 10, Scoredos and Reddy disclose the invention substantially as in 
parent claim 1, including, the connection request is an HTTP request; the transport layer 
component is TCP connection component (Scoredos, [0015, lines 10-14]), 

the application layer component is an HTTP connection component (Reddy, 
Col.8, lines 46-49). 

1 3. As to claims 11,13 and 14, the claims are rejected for the same reasons set forth 
in claim 10 above. 

14. As to claim 1 5, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the filter device further comprises a rate limiter to switch the 
filter device between global and selective modes (Scoredos, [0052, lines 5-9], where 
limit table is rate limiter and allowed or blocked states are global and selective modes), 
the rate limiter to switch the filter device to global mode if a rate limit threshold is 
exceeded and to switch the filter device to selective mode if the rate limit threshold is 
not exceeded (Scoredos, Fig.1, Step-112, [0052, lines 10-14], where limit table is a rate 
limiter and if connection establishes or allowed it is a selective mode if connection is 
blocked it can be interpret as selective mode) 

the controller configured to drop the connection request silently without applying 
the throttle filter if the filter device is in global mode and to apply the throttle filter if the 
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filter device is in selective mode (Scoredos, Fig.1, Step-123 [0016, lines 5-6], where, 
switch is controller to forward or drop the connection). 

15. As to claim 16, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the rate limit threshold further comprises a limit of 
connections created in a connection cycle period (Scoredos, [0046, lines 4-6], where 
number of connections are limit threshold in a connection cycle period). 

16. As to claim 17, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the rate limit threshold further comprises a rate of incoming 
connections ([0052, lines 1-9]). 

17. As to claim 18, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the connection database is a table in which each entry has 
an IP address of a connection requestor and an associated rank based on an outcome 
of a connection attempted in response to a connection request from the connection 
requestor (Scoredos, [0050, lines 1-4], database create an entry of every connection 
and [0053, lines 1-9], connection is prioritized based on prior entry and connection 
history in the database). 

18. As to claim 1 9, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, each entry of the table further includes a port number of the 
connection requestor (Scoredos, [0053, lines 5-9], where database also keeps an entry 
of connection port number). 
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1 9. As to claim 20, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, each entry of the table further includes a virtual routing 
forwarding table ID of the connection requestor (Scoredos, [0053, liens 1-5], where 
state table entry can be a VRF pointer assigned to each connection attempted at 
application layer). 

20. As to claim 22, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the throttle filter is a list of IP addresses of connection 
requestors to be blocked as indicated by data from the connection database (Scoredos, 
[0047, lines 1-22], where limit table keeps all the matching source IP, port and 
destination IP information which are allowable IP's). 

21 . As to claim 23, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the throttle filter further includes port numbers of connection 
requestors to be blocked as indicated by data from the connection database (Scoredos, 
(0047, lines 1-22], where limit table keeps all the matching source IP, port and 
destination IP information which are allowable IP's). 

22. As to claim 24, Scoredos and Reddy disclose the invention substantially as in 
parent claim 12, including, the throttle filter further includes virtual routing forwarding 
table IDs of connection requestors to be blocked as indicated by data from the 
connection database (Scoredos, [0053, lines 9-12], where special type of rule is created 
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for group of IP addresses which comply with the limit rule, so they can be allowable at 
next connection instead of getting blocked). 

23. Claims 28, 29 and 30 are rejected for the same rationale as applied to parent 
claims 1,12 and 27 above and further, Scoredos discloses, in [0035], there is a client 
profile established which filter uses to compare before allowing or dropping the 
connections. 

24. Claim 9 is rejected under 35 U.S.C 103 as being unpatentable over Scoredos 
and Reddy in view of Maruyama et al. (Pub. No.: US 2002/0124103 A1), hereinafter, 
"Maruyama". 

25. As to claim 9, Scoredos and Reddy disclose the invention substantially as In 
parent claim 1 , including, determining whether a limit of connections created in a 
connection cycle period has been exceeded (Scoredos, [0033. lines 1-2], where rule is 
set to check the connections per IP address); 

if the limit of connections created has been exceeded, dropping the connection 
request (Scoredos, [0033, lines 2-4], where exceeded connection is dropped). Scoredos 
and Reddy, however are silent on, if the limit of connections created has not been 
exceeded, determining whether a rate of incoming connections has been exceeded or if 
the rate of incoming connections has been exceeded, then dropping the connection 
request silently or if the rate of incoming connections has not been exceeded, then 
comparing requestor identification information in the TCP connection component of the 
connection request to data in the throttle filter. However, Maruyama teaches, if the limit 
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of connections created has not been exceeded, determining whetlier a rate of incoming 
connections lias been exceeded ([0011, lines 10-20], TCP connection rate is monitored 
for security purposes). Maruyama also discloses, if the rate of incoming connections 
has been exceeded, then dropping the connection request silently ([0011, lines 24-28], 
where excessive connection Is dropped). Maruyama further discloses, if the rate of 
incoming connections has not been exceeded, then comparing requestor identification 
information in the TCP connection component of the connection request to data in the 
throttle filter ([0035, 16-22], where identifier in the tcp packet is examined whether to 
allow a new connection or associate with established connection). 

Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the Invention was niade to modify the teachings of Scoredos, and Reddy with the 
teachings of Maruyama in order to establish a monitoring system from remote computer 
to keep track of working applications by anticipating the critical notifications/outcomes 
generated by those applications and associated solutions to these outcomes. 

26. Claims 25 and 26 are rejected under 35 U.S.C 103 as being unpatentable over 
Scoredos in view of Maruyama and further In view of Reddy. 

27. As to claim 25, Scoredos discloses, a method for filtering HTTP server 
connections In an embedded system, comprising the steps of: 
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receiving a connection request having an HTTP connection component and a 
TCP connection component ([0015, lines 1-4], where header information in the packet is 
TCP connection and payload data is an http connection); 

providing a connection database to store information about connection requests 
([0016, lines 1-4], table of rules can be a database); 

providing a throttle filter using data from the connection database, the throttle filter 
to filter the connection request at the TCP connection component ([0016, lines 1-5], 
where switch-123 is a throttle filter); 

if the limit of connections created has not been exceeded ([0033, lines 1-2], 
where connection status can show if the limit has exceeded); 

determining whether a limit of connections created in a connection cycle period 
has been exceeded ([0033, lines 1-2], where rule has defined for maximum connection 
in limit rule also where rule is set to check the connections per IP address); 

if the limit of connections created has been exceeded, dropping the connection 
request silently (0033, lines 2-4], where exceeded connection is dropped); 

if the throttle filter blocks the TCP connection component, dropping the 
connection request silently ([0033, lines 2-4]); 

updating the throttle filter with information from the connection database 
([0052, lines 10-12]). 

Scoredos does not explicitly discloses, if the limit of connections created has not 
been exceeded, determining whether a rate of incoming connections has been 
exceeded or if the rate of incoming connections has been exceeded, then dropping the 
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connection request silently or if the rate of incoming connections has not been 
exceeded, then comparing requestor identification infomriation in the TCP connection 
component of the connection request to data in the throttle filter or adding data from the 
HTTP connection component to the connection database. However. Maruyama 
teaches, if the limit of connections created has not been exceeded, determining whether 
a rate of incoming connections has been exceeded ([001 1 , lines 10-20], tcp connection 
rate is monitored for security purposes). Maruyama also discloses, if the rate of 
incoming connections has been exceeded, then dropping the connection request 
silently ([0011, lines 24-28, where excessive connection is dropped). Maruyama further 
discloses, if the rate of incoming connections has not been exceeded, then comparing 
requestor identification information in the TCP connection component of the connection 
request to data in the throttle filter ([0035, 16-22], where identifier in the tcp packet is 
examined whether to allow a new connection or associate with established connection). 
Neither Scoredos nor Maruyama discloses, if the throttle filter allows the TCP 
connection component, proceeding with the HTTP connection component or adding 
data from the HTTP connection component to the connection database. However, 
Reddy discloses, if the throttle filter allows the TCP connection component, proceeding 
with the HTTP connection component (Col.7, lines 41-45, where user has established 
the http connection). Reddy further discloses, adding data from the HTTP connection 
component to the connection database (Col.7, lines 41-48 and lines 4-7, where it can be 
seen that user's HTTP request has to go through security Fig.2, step-86 where his login 
will be added into security database). 
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Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the invention was made to modify the teachings of Scoredos and Maruyama with 
the teachings of Reddy in order to establish a monitoring system from remote computer 
to keep track of working applications by anticipating the critical notifications/outcomes 
generated by those applications and associated solutions to these outcomes. 

28. As to claim 26, Scoredos discloses, a method for filtering HTTPS server 
connections in an embedded system, comprising the steps of: 

receiving a connection request having an HTTPS connection component and a 
TCP connection component ([0015, lines 1-4], TCP header information is a transport 
layer component and payload is a HTTPS component); 

providing a connection database to store information about connection requests 
([001 6, lines 1 -4], table of rules can be a database); 

providing a throttle filter using data from the connection database, the throttle 
filter to filter the connection request at the TCP connection component (Fig.1, step-123, 
[0016, lines 1-5], where switch is a throttle filter which filters the connections); 

detemnining whether a limit of connections created in a connection cycle period 
has been exceeded ([0033, lines 1-2], where rule is set to check the connections per IP 
address); 

if the limit of connections created has been exceeded, dropping the connection 
request silently (0033, lines 2-4], where exceeded connection is dropped); 
if the throttle filter blocks the TCP connection component, dropping the 
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connection request silently ([000052, lines 13-14], where connection can be dropped 
silently or reset based on the specified rule); 

if the throttle filter allows the TCP connection component, proceeding with the 
HTTPS connection component (Col.7, lines 41-45, where user has established the http 
connection); 

updating the throttle filter with information from the connection database ([0052, 
lines 10-12]). 

Scoredos do not explicitly discloses, if the limit of connections created has not been 
exceeded, determining whether a rate of incoming connections has been exceeded or if 
the rate of incoming connections has been exceeded, then dropping the connection 
request silently or if the rate of incoming connections has not been exceeded, then 
comparing requestor identification information in the TCP connection component of the 
connection request to data In the throttle filter. However, Maruyama teaches, if the limit 
of connections created has not been exceeded, detemiining whether a rate of incoming 
connections has been exceeded ([0011, lines 10-20], TCP connection rate is monitored 
for security purposes). Maruyama also discloses, if the rate of incoming connections 
has been exceeded, then dropping the connection request silently ([001 1, lines 24-28, 
where excessive connecfion is dropped). Maruyama further discloses, if the rate of 
incoming connecfions has not been exceeded, then comparing requestor identification 
information in the TCP connection component of the connection request to data in the 
throttle filter ([0035, 16-22], where identifier in the tcp packet is examined whether to 
allow a new connection or associate with established connection). Neither Scoredos nor 
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Maruyama discloses, if the tlirottle filter allows the TCP connection component, 
proceeding with the HTTP connection component or adding data from the HTTP 
connection component to the connection database. However, Reddy discloses, if the 
throttle filter allows the TCP connection component, proceeding with the HTTP 
connection component (Col.7, lines 41-45, where user has established the http 
connection). Reddy further discloses, adding data from the HTTP connection 
component to the connection database (Col.7, lines 41-48 and lines 4-7, where it can be 
seen that user's HTTP request has to go through security Fig.2, step-86 where his login 
will be added into security database). 

Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the invention was made to modify the teachings of Scoredos and Maruyama with 
the teachings of Reddy in order to establish a monitoring system from remote computer 
to keep track of working applications by anticipating the critical notifications/outcomes 
generated by those applications and associated solutions to these outcomes. 

29. Claims 4 and 21 are rejected under 35 U.S.C 103 as being unpatentable over 
Scoredos and Reddy in view of Gillies et al. (Pub No.: US 2003/0212821 A1), 
hereinafter "Gillies". 

30. As to claim 4, Scoredos and Reddy discloses the invention substantially as in 
parent claim 1 , however, Scoredos and Reddy are Silent on, wherein the step of 
updating the throttle filter with information from the connection database comprises 
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periodically replacing throttle filter data with a preselected number of connection 
requestor identifiers ranked least desirable in the connection database. 

However, Gillies teaches, updating the throttle filter with information from the 
connection database comprises periodically replacing throttle filter data with a 
preselected number of connection requestor identifiers ranked least (Fig. 6E, [0093, 
lines 4-16], where data is getting replaced by age and old data is getting replaced by 
new data periodically). 

Therefore, it would have been obvious to one ordinary skilled in the art at the 
time the invention was made to combine the teachings of Scoredos and Reddy as 
applied to claim 1 above, with the teachings of Gillies in order to update the data and 
discard old data with newer data in order to control the size of the database and avoid 
the multiplicity of same data. 

31 . As to claim 21 , Scoredos, Reddy and Gillies discloses the invention substantially 
as in parent claim 12, including, the system wherein each entry in the table includes an 
entry age, the filter device configured to delete entries having an entry age that exceeds 
an age threshold (Fig. 6E, [0093, lines 4-16], where data is getting replaced by age and 
old data is getting replaced by new data periodically). 

Response to Arguments 

Applicant's arguments filed 04/30/2007 have been fully considered but they are 
not persuasive. 
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Applicant argues, Scoredos does not teacli, as per claim 1( and other 
independent claim which are similar to claim 1) requires, a connection database be 
provided to store information about connection requests. Examiner respectfully 
disagrees, [0035], clearly describes that clients profile relative to source and destination 
addresses and pemnitted connection limits are defined in rule table which is used while 
processing connection request, these profiles can be added by administrators manually 
so that repetitive connection could by pass the filtering process, therefore database 
provided stores the connection rules and limit and along these lines various other 
modification are obvious. 

Applicant argues, Claim 1 makes use of data regarding past connection request. 
Examiner argues that applicant has never mention this language in the independent 
claim 1. 

Applicant argues, Scoredos does not teach, throttle filter which uses data from 
past connection request. Examiner respectfully disagrees, [0035], clearly shows that the 
filter is used in conjunction with rule table where rules table performs as database and 
has defined the past client profiles already in it and it would not be impossible for one 
ordinary skilled in the art to make other variations using Scoredos invention. 
32. Finally applicant argues, there is no motivation to combine the teachings of 
Scoredos with the teachings of Reddy. Examiner quotes. In response to applicant's 
argument that there is no suggestion to combine the references, the examiner 
recognizes that obviousness can only be established by combining or modifying the 
teachings of the prior art to produce the claimed invention where there is some 
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1 teaching, suggestion, or motivation to do so found either in the references themselves 
or in the l<nowledge generally available to one of ordinary skill in the art. See In re Fine, 
837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 1988)and In re Jones, 958 F.2d 347, 21 
USPQ2d 1941 (Fed. Cir. 1992). In this case, Scoredos invention is trying to overcome 
the processing burden of Incoming connection request by filtering and limiting the 
connection to also improve the delay and service requests, while Reddy teaches the 
monitoring and management of application which can not be improved without applying 
the filtering techniques used in Scoredos invention which can directly applied to Reddy's 
firewall. 

Conclusion 

33. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tauqir Hussain whose telephone number is 571-270- 
1247. The examiner can normally be reached on 7:30 AM to 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bunjob Jaroenchonwanit can be reached on 571 272 3913. The fax phone 
number for the organization where this application or proceeding is assigned Is 571- 
273-8300. 

Infomnation regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status Information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status Information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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